CVE-2026-64727

Awaiting Analysis Awaiting Analysis - Queue

Type Confusion in macOS Tahoe Leading to System Crash

Publication date: 2026-07-27

Last updated on: 2026-07-29

Assigner: Apple Inc.

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-29

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-64727

EUVD

EUVD-2026-49559

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 26.0 (inc) to 26.6 (exc)
apple	tvos	to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-843	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

Executive Summary

This is a type confusion vulnerability caused by improper memory handling. It allows an application to trigger unexpected system termination by exploiting how the system processes data types.

Detection Guidance

This vulnerability is specific to Apple macOS Tahoe 26.6 and tvOS 26.6. Detection involves checking your system's OS version against the patched versions. Use 'sw_vers' on macOS or 'system_profiler SPSoftwareDataType' to check the OS version. If your version is below 26.6, the system is vulnerable.

Impact Analysis

An attacker could potentially crash your device by exploiting this flaw in an app. This may lead to data loss or disrupt normal device operations if the app is malicious or compromised.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves a type confusion issue leading to potential system termination, but no details are given about data exposure or privacy implications.

Mitigation Strategies

Update macOS Tahoe to version 26.6 and tvOS to version 26.6 to address the type confusion issue. Remove any untrusted apps that may trigger the vulnerability.

Hi! I’m here to help you understand CVE-2026-64727. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70